Permissions for create or alter statements are not checked.
-----------------------------------------------------------
Key: CORE-6078
URL: http://tracker.firebirdsql.org/browse/CORE-6078
Project: Firebird Core
Issue Type: Bug
Components: Security
Affects Versions: 3.0.4
Environment: Firebird 3.0.5.33139 Windows x64
Reporter: Simonov Denis
create test$user password '123'; -- Unprivileged user
-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.
set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://tracker.firebirdsql.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Firebird-Devel mailing list, web interface at
https://lists.sourceforge.net/lists/listinfo/firebird-devel
